CVE-2025-47326 Buffer Over-read in WLAN HAL

Transient DOS while handling command data during power control processing...

CVE-2025-47326

CVE-2025-47326 is described in the CVE ecosystem as a Transient DoS issue related to processing of command data during power control, with the CVE-List entry specifically noting a Buffer Over-read in the WLAN HAL. The connected entries indicate this affects Qualcomm components (including WLAN HAL...

CVE-2025-47318 Buffer Over-read in BT Controller

Transient DOS while parsing the EPTM test control message to get the test pattern...

CVE-2025-47318 Buffer Over-read in BT Controller

Transient DOS while parsing the EPTM test control message to get the test pattern...

CVE-2025-47317 Buffer Over-read in BT Controller

Memory corruption due to global buffer overflow when a test command uses an invalid payload type...

CVE-2025-27036 Buffer Over-read in Video

Information disclosure when Video engine escape input data is less than expected minimum size...

CVE-2025-27036 Buffer Over-read in Video

Information disclosure when Video engine escape input data is less than expected minimum size...

CVE-2025-27036

CVE-2025-27036 concerns Qualcomm chipsets with a vulnerability in the Video engine’s handling of input data smaller than the expected minimum size. Root cause: a buffer/processing mismatch in the video engine leads to information disclosure. Affected: Qualcomm chipsets (Video engine component); e...

CVE-2025-27033

CVE-2025-27033 is described as an information-disclosure issue related to video processing on Qualcomm chipsets under rogue firmware. Connected sources (Pixel Watch bulletin) classify it under Qualcomm components with a moderate severity and identify Video as the affected subcomponent. The vulner...

CVE-2025-27033 Buffer Over-read in Video

Information disclosure while running video usecase having rogue firmware...

CVE-2025-27033 Buffer Over-read in Video

Information disclosure while running video usecase having rogue firmware...

CVE-2025-27030 Buffer Over-read in Audio

information disclosure while invoking calibration data from user space to update firmware size...

CVE-2025-27030

CVE-2025-27030 is described as an information disclosure in Qualcomm audio components, tied to Pixel Watch security bulletin coverage. The connected Pixel Watch bulletin lists this CVE under the Qualcomm components table with the vulnerability type as Audio and notes a patch level requirement of ...

CVE-2025-27030 Buffer Over-read in Audio

information disclosure while invoking calibration data from user space to update firmware size...

CVE-2025-21488 Buffer Over-read in Data Network Stack & Connectivity

Information disclosure while decoding this RTP packet headers received by UE from the network when the padding bit is set...

CVE-2025-21488

CVE-2025-21488 affects Qualcomm closed‑source components (Data Network Stack & Connectivity) and is caused by improper handling of padding bits when decoding RTP packet headers, leading to information disclosure in the UE. The CVE is described as a buffer over‑read/information leak. Public connec...

CVE-2025-21487 Buffer Over-read in Data Network Stack & Connectivity

Information disclosure while decoding RTP packet received by UE from the network, when payload length mentioned is greater than the available buffer length...

CVE-2025-21487 Buffer Over-read in Data Network Stack & Connectivity

Information disclosure while decoding RTP packet received by UE from the network, when payload length mentioned is greater than the available buffer length...

CVE-2025-21487

CVE-2025-21487 concerns information disclosure in Qualcomm closed‑source components due to incorrect handling of RTP payload length when decoding packets. The root cause is a buffer length mismatch that can lead to over-read and leakage of information from the UE. The vulnerability is categorized...

CVE-2025-21484 Buffer Over-read in Data Network Stack & Connectivity

Information disclosure when UE receives the RTP packet from the network, while decoding and reassembling the fragments from RTP packet...